Commit graph

2157 commits

Author SHA1 Message Date
Kijin Sung
4ee115e4f3 Improve server environment display 2017-02-22 19:49:49 +09:00
Kijin Sung
780034d4ee Do not explicitly set the domain for session cookies 2017-02-17 19:33:05 +09:00
Kijin Sung
cbae2c374e Use meta refresh instead of 302 redirect on new session
Attempting to fix missing session cookie in some versions of Android webview and Chrome.
This may or may not be of any use, but why not try?

See https://bugs.chromium.org/p/chromium/issues/detail?id=150066
2017-02-16 11:53:27 +09:00
Kijin Sung
ba925150a3 Quash www subdomain to prevent duplicate sessions 2017-02-13 13:55:47 +09:00
conory
0869e629b9 getUrl 에 rewrite category 추가 2017-02-11 20:27:55 +09:00
Kijin Sung
99cb67b5db Merge pull request #567 from kijin/pr/session-class
세션 처리 관련 기능 정리 및 개선
2017-02-10 21:30:06 +09:00
Kijin Sung
03866c7777 Populate an empty SessionHelper object if not logged in 2017-02-10 21:26:38 +09:00
Kijin Sung
11883fb965 Populate 'user' property of TemplateHandler instances 2017-02-10 21:18:53 +09:00
Kijin Sung
45e930f04c Populate 'user' property of every module instance with current user info 2017-02-10 21:08:05 +09:00
Kijin Sung
dfdbc1db85 Add session helper class and move remainder of session validation logic to Session class 2017-02-10 20:50:38 +09:00
Kijin Sung
2af90c8e1d Implement autologin in the Session class 2017-02-08 17:08:31 +09:00
Kijin Sung
ca9a0aef25 Update autologin table with more columns 2017-02-08 16:16:31 +09:00
Kijin Sung
1a8dcd6a34 Do not cause fatal error when query cache file failed to load 2017-02-08 14:12:44 +09:00
Kijin Sung
af41f36bf7 Move checkSSO() from Context class to Session class 2017-02-07 23:26:43 +09:00
Kijin Sung
483ac84796 Merge branch 'develop' into pr/session-class 2017-02-07 22:13:08 +09:00
Kijin Sung
607e9357c2 Merge pull request #686 from kijin/pr/delete-empty-folders
빈 폴더 자동 삭제 및 일괄 삭제
2017-02-05 22:57:02 +09:00
Kijin Sung
bef2e35f84 Fix disappearing validator message due to XE 1.8.29 security patch
- xpressengine/xe-core#2020
- https://www.xetown.com/qna/491042
2017-02-02 15:33:58 +09:00
Kijin Sung
2ef85c2555 Use Storage::deleteEmptyDirectory() in FileHandler::removeEmptyDir() 2017-01-26 18:01:47 +09:00
Kijin Sung
079daf8a21 XEVE-16-009 보완 2017-01-12 14:53:04 +09:00
bnu
fe5feddc63 Fix #2006 XEVE-16-009 Form validator에서 사용되는 세션 데이터가 G/P/C 데이터로 대치되어 발생할 수 있는 XSS 취약점 해결
- 제보 : setuid0
2017-01-12 14:42:13 +09:00
Kijin Sung
67d16d0f3c Fix xe_validator_id being overwritten by input error 2017-01-10 00:09:50 +09:00
Kijin Sung
4f15ae24ea Display GB and TB sizes correctly in FileHandler::filesize() 2016-12-17 22:30:51 +09:00
Kijin Sung
d34ef5901f Improve FileHandler::returnBytes() to handle a wider range of sizes 2016-12-17 20:49:10 +09:00
Kijin Sung
2db14c1ea9 Show query errors in debug panel and error log 2016-12-13 14:09:51 +09:00
Kijin Sung
98b32a2572 Do not apply site lock when called on the CLI 2016-11-22 09:44:07 +09:00
Kijin Sung
eb467b5799 Fix #615 SEO compatibility with third-party modules using their own $oDocument 2016-10-23 15:05:11 +09:00
Kijin Sung
db7b613d03 Prevent Mobile class from adding data to session 2016-10-05 17:55:25 +09:00
Kijin Sung
a1618c236f Merge branch 'develop' into pr/session-class 2016-10-05 17:26:12 +09:00
Kijin Sung
b7c558a96f Move session delay feature into Session class 2016-10-05 17:26:05 +09:00
Kijin Sung
e9df310364 Additional fixes for #601 2016-10-01 23:32:59 +09:00
Kijin Sung
95a36477b7 Clean up path handling in TemplateHandler 2016-10-01 21:54:25 +09:00
Kijin Sung
b6113b9df8 Allow access to superglobals and constants in template code 2016-10-01 21:39:04 +09:00
Kijin Sung
78a0e857b5 Also trigger warning when template is not found 2016-10-01 21:16:01 +09:00
Kijin Sung
7e5356380f Fix #579 insufficient information in template error 2016-10-01 21:13:24 +09:00
Kijin Sung
69ea93914a Don't redirect from site start module unless request method is GET 2016-09-18 20:59:07 +09:00
Kijin Sung
be9a109a37 Support <offset> in XML query <navigation> section 2016-09-14 13:44:35 +09:00
Kijin Sung
d07bd15b80 Integrate session class with Context class and Member module 2016-08-15 21:49:17 +09:00
BJRambo
81f59b83bd Fixed typo 2016-08-10 21:37:43 +09:00
BJRambo
d59f7ae29c fixed typo 2016-08-08 21:30:04 +09:00
BJRambo
792a6b731b 태블릿 설정여부와 상관없이 모바일최적화 버튼이 뜨는 문제 고침 2016-08-08 21:23:15 +09:00
Kijin Sung
e771e4ae0b Apply non-GET/non-POST CSRF patch from XE 1.8.24 (bed604e) 2016-08-05 17:03:24 +09:00
Kijin Sung
910f7220e6 Import cryptographic signature functions from XE 1.8.23 2016-08-02 16:30:33 +09:00
bnu
61c54504ef - invalid_float 메시지 추가
- 파일 용량 설정의 룰셋 추가 수정
- XML Filter에서 float를 처리할 수 있도록 룰세 추가
2016-08-02 16:00:47 +09:00
bnu
46278a886b type 이름을 'float'로 변경 2016-08-02 15:58:10 +09:00
sejin7940
a37b288f1b Update Validator.class.php 2016-08-02 15:56:43 +09:00
Kijin Sung
3d8b7755ee Fix manual mobile setting not working 2016-07-09 23:00:16 +09:00
Kijin Sung
07d97242ec Unify lang and locale config files 2016-07-03 23:58:11 +09:00
Kijin Sung
313e7048d5 Remove safe_mode condition from FileHandler 2016-07-03 17:59:50 +09:00
Kijin Sung
222be43303 Remove condition of checking the content of minified scripts 2016-06-29 20:50:30 +09:00
Kijin Sung
aef4797c1c Update routine for broken symlink detection 2016-06-29 19:20:53 +09:00